Lucene search
+L

210 matches found

Tenable Nessus
Tenable Nessus
•added 2026/07/14 12:00 a.m.•21 views

Linux Distros Unpatched Vulnerability : CVE-2026-61627

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ubuntu Linux - GHSA-pjjp-65r7-ppgm: Out-of-bounds read and write in wraplinesmeasure CVE-2026-61627 Note that Nessus relies on the presence of the package as...

5.8AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/07/14 12:00 a.m.•11 views

PT-2026-64217

It was discovered that libass incorrectly handled parsing operations for specific nested character strings. An attacker could use this issue to cause libass to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS,...

8.8CVSS8.1AI score0.0265EPSS
SaveExploits1References12
Positive Technologies
Positive Technologies
•added 2026/07/14 12:00 a.m.•5 views

PT-2026-64218

Name of the Vulnerable Software and Affected Versions libass affected versions not specified Description An out-of-bounds read and write occurs in the wrap lines measure function. This issue affects libass, a portable subtitle renderer for the ASS/SSA Advanced Substation Alpha/Substation Alpha...

7.3CVSS5.7AI score
SaveExploits0References19
osv_jlsec
osv_jlsec
•added 2026/04/20 6:02 p.m.•18 views

JLSEC-2026-154

Stack overflow in the parsetag function in libass/assparse.c in libass before 0.15.0 allows remote attackers to cause a denial of service or remote code execution via a crafted file...

8.8CVSS7.8AI score0.0265EPSS
SaveExploits0References4
osv_jlsec
osv_jlsec
•added 2026/04/20 6:02 p.m.•22 views

JLSEC-2026-155

In libass 0.14.0, the assoutlineconstruct's call to outlinestroke causes a signed integer overflow...

8.8CVSS7.8AI score0.01802EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2026/04/20 12:00 a.m.•4 views

PT-2026-36265

Stack overflow in the parse tag function in libass/ass parse.c in libass before 0.15.0 allows remote attackers to cause a denial of service or remote code execution via a crafted file...

8.8CVSS6.4AI score
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/04/20 12:00 a.m.•3 views

PT-2026-36266

In libass 0.14.0, the ass outline construct's call to outline stroke causes a signed integer overflow...

8.8CVSS6AI score
SaveExploits0References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2020-23958

Malware in sbrugna...

7.8CVSS7.4AI score0.01075EPSS
SaveExploits0References8
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2016-8818

Malware in sbrugna...

7.5CVSS7.3AI score0.05202EPSS
SaveExploits0References17
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•23 views

EUVD-2020-17694

Malware in sbrugna...

8.8CVSS7.4AI score0.0265EPSS
SaveExploits0References7
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2016-8820

Malware in sbrugna...

7.5CVSS7.3AI score0.05396EPSS
SaveExploits0References18
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2016-8817

Malware in sbrugna...

7.5CVSS7.3AI score0.04761EPSS
SaveExploits0References18
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•22 views

EUVD-2020-19224

Malware in sbrugna...

8.8CVSS7.7AI score0.01802EPSS
SaveExploits1References8
Tenable Nessus
Tenable Nessus
•added 2025/08/30 12:00 a.m.•12 views

Linux Distros Unpatched Vulnerability : CVE-2020-26682

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In libass 0.14.0, the assoutlineconstruct's call to outlinestroke causes a signed integer overflow. CVE-2020-26682 Note that Nessus relies on the presence of th...

8.8CVSS7.5AI score0.01802EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2025/08/18 12:00 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2020-24994

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Stack overflow in the parsetag function in libass/assparse.c in libass before 0.15.0 allows remote attackers to cause a denial of service or remote code executi...

8.8CVSS7.7AI score0.0265EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2025/04/09 12:00 a.m.•30 views

ASS/SSA Libass subtitle renderer Heap Buffer Overflow DoS

The vulnerability of the assoutlineconstruct function in the ASS/SSA Libass subtitle renderer is related to integer overflow. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

8.8CVSS7.7AI score0.01802EPSS
SaveExploits1References10Affected Software3
BDU FSTEC
BDU FSTEC
•added 2025/04/09 12:00 a.m.•28 views

Libass parse_tag() Heap Buffer Overflow DoS

The vulnerability of the parsetag function in the libass/assparse.c component of the ASS/SSA subtitle renderer library in Libass is related to the allocation of unlimited memory. Exploiting this vulnerability could allow a malicious actor to gain access to confidential data, compromise its...

8.8CVSS7.2AI score0.0265EPSS
SaveExploits0References10Affected Software3
osv_opensuse
osv_opensuse
•added 2024/06/15 12:00 a.m.•16 views

OPENSUSE-SU-2024:10508-1 libass-devel-0.13.4-2.1 on GA media

These are all security issues fixed in the libass-devel-0.13.4-2.1 package on the GA media of openSUSE Tumbleweed...

7.5CVSS7.8AI score0.05396EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2023/10/20 12:00 a.m.•28 views

Ubuntu 16.04 ESM : LibASS vulnerabilities (USN-4797-1)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4797-1 advisory. It was discovered that LibASS incorrectly handled certain ASS files. A remote attacker could possibly use this issue to cause a denial of service. One of...

8.8CVSS7.5AI score0.05396EPSS
SaveExploits0References5
OpenVAS
OpenVAS
•added 2023/03/08 12:00 a.m.•24 views

Debian: Security Advisory (DLA-668-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.7AI score0.05396EPSS
SaveExploits0References3
Rows per page
Query Builder